Android Question Okhttp problem whit server SSL

[Vincenzo Fabiano]

*** Service (httputils2service) Create ***
Class okhttp3.Dispatcher failed lock verification and will run slower.
Class okhttp3.ConnectionPool failed lock verification and will run slower.
Class okhttp3.ConnectionPool$1 failed lock verification and will run slower.
** Service (httputils2service) Start **
Class anywheresoftware.b4a.B4AThreadPool failed lock verification and will run slower.
Class okhttp3.RealCall failed lock verification and will run slower.
Class okhttp3.internal.connection.StreamAllocation failed lock verification and will run slower.
Class okio.SegmentPool failed lock verification and will run slower.
Class okio.AsyncTimeout$Watchdog failed lock verification and will run slower.
javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification pathnot found.
at com.android.org.conscrypt.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:361)
at okhttp3.internal.connection.RealConnection.connectTls(RealConnection.java:242)
at okhttp3.internal.connection.RealConnection.establishProtocol(RealConnection.java:200)
at okhttp3.internal.connection.RealConnection.buildConnection(RealConnection.java:174)
at okhttp3.internal.connection.RealConnection.connect(RealConnection.java:114)
at okhttp3.internal.connection.StreamAllocation.findConnection(StreamAllocation.java:196)
at okhttp3.internal.connection.StreamAllocation.findHealthyConnection(StreamAllocation.java:132)
at okhttp3.internal.connection.StreamAllocation.newStream(StreamAllocation.java:101)
at okhttp3.internal.connection.ConnectInterceptor.intercept(ConnectInterceptor.java:42)
at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:92)
at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:67)
at okhttp3.internal.cache.CacheInterceptor.intercept(CacheInterceptor.java:93)
at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:92)
at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:67)
at okhttp3.internal.http.BridgeInterceptor.intercept(BridgeInterceptor.java:93)
at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:92)
at okhttp3.internal.http.RetryAndFollowUpInterceptor.intercept(RetryAndFollowUpInterceptor.java:120)
at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:92)
at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:67)
at okhttp3.RealCall.getResponseWithInterceptorChain(RealCall.java:179)
at okhttp3.RealCall.execute(RealCall.java:63)
at anywheresoftware.b4h.okhttp.OkHttpClientWrapper.executeWithTimeout(OkHttpClientWrapper.java:156)
at anywheresoftware.b4h.okhttp.OkHttpClientWrapper.access$0(OkHttpClientWrapper.java:153)
at anywheresoftware.b4h.okhttp.OkHttpClientWrapper$ExecuteHelper.run(OkHttpClientWrapper.java:201)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:428)
at java.util.concurrent.FutureTask.run(FutureTask.java:237)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1133)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:607)
at java.lang.Thread.run(Thread.java:761)
Caused by: java.security.cert.CertificateException: java.security.cert.CertPathValidatorException: Trust anchor for certification pathnot found.
at com.android.org.conscrypt.TrustManagerImpl.checkTrustedRecursive(TrustManagerImpl.java:549)
at com.android.org.conscrypt.TrustManagerImpl.checkTrusted(TrustManagerImpl.java:401)
at com.android.org.conscrypt.TrustManagerImpl.checkTrusted(TrustManagerImpl.java:375)
at com.android.org.conscrypt.TrustManagerImpl.getTrustedChainForServer(TrustManagerImpl.java:304)
at android.security.net.config.NetworkSecurityTrustManager.checkServerTrusted(NetworkSecurityTrustManager.java:94)
at android.security.net.config.RootTrustManager.checkServerTrusted(RootTrustManager.java:88)
at com.android.org.conscrypt.Platform.checkServerTrusted(Platform.java:178)
at com.android.org.conscrypt.OpenSSLSocketImpl.verifyCertificateChain(OpenSSLSocketImpl.java:596)
at com.android.org.conscrypt.NativeCrypto.SSL_do_handshake(Native Method)
at com.android.org.conscrypt.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:357)
... 28 more
Caused by: java.security.cert.CertPathValidatorException: Trust anchor for certification pathnot found.
... 38 more
ResponseError. Reason: javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification pathnot found., Response:Log reader error: java.io.InterruptedIOException: read interrupted
-1 received
writer error
java.lang.InterruptedException
at java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject.reportInterruptAfterWait(AbstractQueuedSynchronizer.java:2010)
at java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject.await(AbstractQueuedSynchronizer.java:2044)
at java.util.concurrent.ArrayBlockingQueue.take(ArrayBlockingQueue.java:358)
at anywheresoftware.b4a.remotelogger.Connector$Writer.run(Connector.java:160)
at java.lang.Thread.run(Thread.java:761)

Any fix on client side?

 

[OliverA]

@Erel answered it here: https://www.b4x.com/android/forum/t...re-now-even-simpler.18992/page-14#post-241469

Note: Please use responsibly. You're basically circumventing what SSL is all about.

 

[Vincenzo Fabiano]

@Erel answered it here: https://www.b4x.com/android/forum/t...re-now-even-simpler.18992/page-14#post-241469

Note: Please use responsibly. You're basically circumventing what SSL is all about.

Whit old HttpUtils2 i have this error: https://www.b4x.com/android/forum/threads/error-when-using-httputils2.58436/

Erel has therefore recommended using OkHttp (That I'm currently using).

Can you make the same change using OkHttp?

 

[MarcoRome]

I post #1 you have source ( bas ) HttpUtils. So you can change there.

 

[Erel]

Yes. You should call OkHttpClient.InitializeAcceptAll.

I post #1 you have source ( bas ) HttpUtils. So you can change there.

There is no reason to use the old HttpUtils2

 

[Vincenzo Fabiano]

Yes. You should call OkHttpClient.InitializeAcceptAll.


There is no reason to use the old HttpUtils2

Since I'm using OkHttpUtils2 (using HttpJob to create a request), just enter "OkHttpClient.InitializeAcceptAll" when the Activity is created without editing anything else?

 

[Erel]

No. You need to use OkHttpUtils2 source code and modify it as explained in that post.

 

[MarcoRome]

Yes. You should call OkHttpClient.InitializeAcceptAll.


There is no reason to use the old HttpUtils2

Sorry is my mistake i thought it was already the new version

 

[OliverA]

Source code can be found here: [https://www.b4x.com/android/forum/t...putils2-httputils2-source-code.82632/#content]
Download the B4A_Modules.zip. It contains the two modules you need to add to your project.
The only modification to @Erel's steps as linked above is that the library that you need to uncheck is now called OkHttpUtils2 (or something similar, I don't have B4A in front of me right now).

 

[Vincenzo Fabiano]

Source code can be found here: [https://www.b4x.com/android/forum/t...putils2-httputils2-source-code.82632/#content]
Download the B4A_Modules.zip. It contains the two modules you need to add to your project.
The only modification to @Erel's steps as linked above is that the library that you need to uncheck is now called OkHttpUtils2 (or something similar, I don't have B4A in front of me right now).

Fixed, thanks all!